Manager Risk and Assurance

• Deliver and maintain Bravura s annual Internal Audit & Review Plan, ensuring timely completion of planned reviews.
• Conduct risk-based internal audits across operational, compliance, and information security domains.
• Document and report findings, root causes, and agreed management actions.Track and monitor the closure of audit findings to ensure effective remediation.
• Support external and certification audits by maintaining evidence, action tracking, and audit readiness
• documentation.
• Maintain the internal review and audit charter, calendar, and documentation on SharePoint/Confluence.

Information Security Assurance

• Support internal ISO27001 audits and liaise with the Information Security team to validate control effectiveness.
• Prepare and review audit materials for client assurance and due diligence requests (e.g., RFPs, SOC2 mapping,
• ISO27001 evidence).
• Ensure control gaps, non-conformities, and opportunities for improvement are documented and addressed.
• Contribute to audit and risk dashboards presented to the GRC Head, CFO, Group Risk Council and Audit & Risk Committee.

Risk Management

• Support the facilitation of Risk and Control Self-Assessment (RCSA) workshops and documentation of business risks.
• Provide oversight of control testing, monitoring, and risk mitigation actions.
• Escalate significant risk issues in a timely and transparent manner.
• Assist in the preparation of quarterly risk and assurance reports for Group Risk Council.

Business Continuity & Compliance

• Ensure assurance activities align with Bravura s Business Continuity, Risk, and Compliance frameworks.
• Maintain readiness for ISO22301 (Business Continuity), ISO45001 (Safety), and ISO14001 (Environmental) audits.
• Support coordination of business continuity testing and internal review outcomes with relevant stakeholders.

Stakeholder & Team Collaboration

• Partner with stakeholders across Finance, Technology, Legal, Operations, and regional GRC representatives to maintain oversight of key controls.
• Collaborate with the GRC team in Sydney, Gurgaon, and other regions to ensure consistency of reporting and approach.
• Provide mentoring and guidance to senior analysts supporting the internal audit and assurance program.
• Expectation of at least 2 days per week with adjusted working hours to support EMEA stakeholders.

Qualifications & Experience

• Minimum 8-10 years experience in Risk Management, Internal Audit, or Information Security Assurance.
• Demonstrated experience conducting internal audits in accordance with ISO standards or IIA methodology.
• Familiarity with ISO27001, ISO22301, ISO45001, and ISO14001 standards.
• Experience supporting certification audits and managing corrective action tracking.
• Background in financial services, technology, or SaaS preferred.
• Relevant tertiary qualifications and/or certifications such as CIA, CISA, CRISC, ISO Lead Auditor or equivalent desirable.

Skills & Attributes

• Strong analytical, investigative, and documentation skills.
• Excellent communication and stakeholder management abilities.
• High attention to detail with strong accountability and follow-through.
• Ability to manage competing priorities in a fast-paced, global environment.
• Collaborative, proactive, and adaptable to change.
• Demonstrates Bravura s values and commitment to integrity and client trust.